Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe and North America: 718 cases from 32 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by regionAll jurisdictions
What for?
by area of lawAll areas of law
Who?
by company- Google LLC €1.19bn 39 % · 1 case
- Google €890m 29 % · 1 case
- Apple €500m 17 % · 2 cases
- Cadence Design Systems Inc. €120.1m 4 % · 1 case
- Comunicaciones Celulares S.A. (TIGO Guatemala) €102.1m 3 % · 1 case
- Vodafone GmbH €45m 1 % · 1 case
- Free Mobile SAS und Free SAS €42m 1 % · 1 case
- Clearview AI Inc. €30.5m 1 % · 1 case
- Swisscom (Schweiz) AG €19.4m 1 % · 1 case
- Exclusive Networks Corporate SAS €16.1m 1 % · 1 case
- 37 more€68.4m
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q3 2023 | 0 | — |
| Q4 2023 | 0 | — |
| Q1 2024 | 1 | €157,176 |
| Q2 2024 | 0 | — |
| Q3 2024 | 0 | — |
| Q4 2024 | 0 | — |
| Q1 2025 | 0 | — |
| Q2 2025 | 0 | — |
| Q3 2025 | 0 | — |
| Q4 2025 | 0 | — |
| Q1 2026 | 0 | — |
| Q2 2026 | 0 | — |
| Q3 2026 | 0 | — |
1 case
16 Jan 2024 Black Tiger Belgium (vormals Bisnode Belgium)Black Tiger Belgium: fine for non-transparent data trading, reduced by 10% in court €157,176
The data broker processed data obtained from third-party sources (including the companies register) on a large scale and over a long period without proactively informing the data subjects; access requests were answered incompletely and the record of processing activities had gaps. The Autorité de protection des données (Belgian Data Protection Authority, APD) imposed three fines totalling 174,640 EUR and prohibited, among other things, the ‘Data Quality’ service until data subjects had been informed; on 4 September 2024 the Brussels Market Court set aside the orders and reduced the fines by 10% to a total of 157,176 EUR.
Anyone collecting data indirectly must actively inform data subjects – legitimate interest does not hold where laws prohibit further use.
- Authority / court
- Autorité de protection des données (APD/GBA) – Chambre Contentieuse
- Area of law
- Data protection · Data subject rights and transparency
- Legal basis
- DSGVO – Rechtmäßigkeit, Fairness und Transparenz, Auskunftsrecht, Verzeichnis von Verarbeitungstätigkeiten
- Action
- Fine
- Status of proceedings
- reduced
- Sector
- Telecoms, IT and software
- Mitigating circumstances
- Discontinuation of the ‘Data Delivery’ service and destruction of the CMX consumer database.
- Published
- 16 Jan 2024
Checked against the official source on 25 Sep 2026 · Direct link